Privacy Policy

Who we are

Flytrix is a personal flight history and travel-analytics app. You log the flights you have taken and Flytrix turns them into maps, stats, trips, passport stamps, and travel insights. This policy explains what data we hold, why, and the controls you have over it. It is written in plain English and is not legal advice.

Information we collect

We collect only what we need to run the app:

• Account information - your email address and name, used to sign you in and personalise the app.
• Preferences - home airport, timezone, preferred currency, and display formats.
• Flight, trip, map, and travel data - the flights you log (airports, airlines, flight numbers, dates, routes, and, if you enter them, cabin, seat, aircraft details, status, notes, and ratings), plus the trips you create to group them.
• Booking, spend, payment, and loyalty data you choose to enter - optional fields such as ticket price, taxes/fees, points used or earned, booking references, and payment method, used only for your own personal analytics.
• Public profile settings - your chosen username and whether your public profile is enabled.

CSV imports

If you import flights from a CSV file, we process the rows you upload to create flight records in your account. Imported data is treated the same as data you enter manually - it stays in your private account unless you choose to share it.

Billing and payments through Stripe

Paid subscriptions are processed by Stripe, our payment processor. When you subscribe, your card details are entered directly with Stripe on their secure checkout - Flytrix never receives or stores your full card number. We store only non-sensitive billing references (such as your Stripe customer and subscription IDs, plan, status, and renewal dates) so we can manage your subscription. Stripe's handling of your payment information is governed by Stripe's own privacy policy.

How we use information

We use your data to provide the app: to store your flight history, compute your stats and maps, convert currencies, render your optional public profile, manage your subscription, and send essential account and billing emails. We do not sell your personal data, and we do not use it for advertising.

Public profile and sharing

Your public profile (at /u/your-username) is private by default and only becomes visible if you turn it on in Settings. When enabled, visitors see a public-safe travel passport: your route map, headline totals, and country flags.

Private fields are stripped on the server before the page is sent and are nevershown publicly: spend and ticket prices, points used or earned, payment methods, booking platforms and references, seat numbers, aircraft tail numbers, personal notes, ratings, flight status, and future flights. You can disable your public profile at any time.

Third-party service providers

We rely on a small set of trusted processors to run Flytrix:

• Supabase - database, authentication, and auth email delivery.
• Vercel - application hosting and delivery.
• Stripe - subscription billing and payment processing.
• Resend - the email provider behind Supabase for sign-up and password-reset emails.
• AeroDataBox (via API.Market) - flight and aircraft lookups when you search for a flight.
• Frankfurter - public exchange-rate data used to convert costs to your preferred currency.
• ipapi.co - approximate location from your IP address during onboarding, to suggest a timezone and home airport. This is a convenience only, and you can change the suggestions.

Cookies, local storage, and similar technologies

Flytrix uses authentication/session cookies (set by Supabase) to keep you signed in, and your browser's local storage to remember display preferences. We do not use advertising or cross-site tracking cookies, so there is no separate cookie-consent banner today. Stripe may set cookies on its own checkout pages to process payments securely.

Global lookup caches

To avoid repeated external lookups, Flytrix caches factual flight and aircraft data (for example, an aircraft registration's model or age). These caches hold public, non-personal facts and are not linked to your private notes, payment, or loyalty data.

Data security

Your data is stored in managed, access-controlled infrastructure, and row-level security ensures each account can only read its own data. Payment details are handled by Stripe on their PCI-compliant systems. No online service can be guaranteed perfectly secure, but we take reasonable measures to protect your information.

Data export, account deletion, and retention

You can export your flights as a CSV file from Settings at any time, delete all your flight data while keeping your account, or close your account entirely.

When you delete your account, we remove access to your account and delete, de-identify, or anonymise account data where practical. We may retain limited records where required for legal, tax, accounting, billing, fraud-prevention, dispute-resolution, security, or compliance purposes - for example, billing records held by Stripe for tax and accounting. We may also retain aggregate or de-identified metrics that do not reasonably identify you. We don't keep your personal data longer than we reasonably need to.

Cancelling a paid subscription is not the same as deleting your account - your saved flights, trips, and history are not deleted just because a subscription ends. See the Terms for how cancellation affects access.

De-identified and aggregate analytics

We may keep aggregate or de-identified information that does not reasonably identify you - for example, total users, the number of flights added, common routes, and overall usage trends - to understand how Flytrix is used, improve the product, and report high-level metrics. This information is not linked back to your identity.

International users

Flytrix is operated from Australia, and your data may be processed in Australia and in other countries where our service providers operate. If you use Flytrix from outside Australia, you may have additional rights under your local privacy laws.

Children

Flytrix is not directed to children and is intended for users old enough to hold an account under the laws that apply to them. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will remove it.

Changes to this policy

We may update this policy as the product evolves. Material changes will be reflected here with a new "last updated" date.

Contact

Questions about your privacy or this policy? Use our contact form or email hello@flytrix.app.